# RSS feed into ELK. Can we do it with Filebeat?

**URL:** <https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310>\
**Category:** Kibana\
**Created:** [October 21, 2021, 11:43am UTC](https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310 "2021-10-21T11:43:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![elasticfran](https://avatars.discourse-cdn.com/v4/letter/e/e47c2d/32.png) [@elasticfran](https://discuss.elastic.co/u/elasticfran)\
**Post date:** [October 21, 2021, 11:43am UTC](https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310/1 "2021-10-21T11:43:49Z")

</div>

Hey there!

Can we ingest RSS feeds into Filebeat?

I found a module for Logstash

> **[Rss input plugin | Logstash Reference \[7.15\] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-rss.html)**

but given my environment would be better doing it with Filebeat.

Any experience?

Much appreciated!

---

<div class="post-metadata">

**Author:** ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)\
**Post date:** [October 21, 2021, 2:12pm UTC](https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310/2 "2021-10-21T14:12:02Z")

</div>

Hi

No, this is not possible with Filebeat. Filebeat is watching already existing files for changes and forwards those to Elasticsearch (or Logstash). It has no input for a URL like it is necessary for a RSS feed. So to make this work, the RSS would need to be written into a file, then it could be forwarded by filebeat. However, also the content of this file would need some preparation before ingesting. So I think logstash is a fine choice here.

BTW, this is the Kibana part of [discuss.elastic.co](http://discuss.elastic.co), so it's a bit off topic here 🙂  
Hope this helps nethertheless.

Best,  
Matthias

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 18, 2021, 2:12pm UTC](https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310/3 "2021-11-18T14:12:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.